PL-900 Manage the Microsoft Power Platform environment Practice Test 3 — 15 Questions

Question 1

A company wants to allow external partners to access a Power Apps portal without requiring a Microsoft Entra ID account. What should the administrator configure?

Accepted Answer

Configure the portal to use local authentication with username and password. Power Apps portals support local authentication, which allows external users to sign up and sign in using a username and password without requiring a Microsoft Entra ID account. This is the appropriate method when the goal is to grant access to partners who do not have or need Microsoft Entra ID credentials.

Answer

Create Microsoft Entra ID guest accounts for each partner

Answer

Share the Power Apps app directly with the partners

Answer

Enable Microsoft Entra ID B2B collaboration and invite partners

Question 2

An organization has multiple Power Platform environments. They need to ensure that all environments have consistent DLP policies and that any changes are tracked. What should the administrator implement?

Accepted Answer

Use the Power Platform Center of Excellence (CoE) Starter Kit to manage and monitor policies. The Power Platform Center of Excellence (CoE) Starter Kit is a Microsoft-provided collection of Power Platform components (apps, flows, dashboards) designed specifically to give administrators centralized visibility and governance across all environments in a tenant. It includes DLP policy management, environment inventory, and change tracking capabilities, which directly addresses the requirement for consistent policies and tracked changes across multiple environments.

Answer

Export DLP policies as solutions and import them into each environment

Answer

Enable audit logging in each environment

Answer

Create environment groups and assign DLP policies to the group

Question 3

Which TWO actions can a Power Platform administrator perform in the Power Platform Admin Center to manage environments?

Accepted Answer

Backup an environment. The Power Platform Admin Center provides a built-in backup feature that allows administrators to create manual backups of environments. This is essential for disaster recovery and data preservation before making significant changes. Backups can be triggered on-demand and are stored for a limited retention period.

Answer

Increase the storage limit of an environment

Answer

Change an environment from production to sandbox

Answer

Add a custom connector to an environment

Question 4

Refer to the exhibit. A Power Platform administrator is reviewing a JSON export of an environment configuration. Which statement is true based on the exhibit?

Accepted Answer

Security groups are assigned to the environment. The JSON export includes a 'securityGroups' property with an array of group IDs, indicating that one or more Microsoft Entra ID (formerly Azure AD) security groups are explicitly linked to the environment. This configuration restricts environment access to members of those security groups, which is a common practice for controlling access in production or shared environments.

Answer

The environment was created from a trial

Answer

The environment uses French language

Answer

The environment is a sandbox environment

Question 5

Refer to the exhibit. A Power Platform administrator runs a PowerShell command to check the status of an environment. What does the output indicate?

Accepted Answer

The environment is active and usable. The PowerShell command output shows the environment's state as 'Ready' and its provisioning status as 'Succeeded', which together indicate the environment is fully provisioned and operational. In Power Platform, a 'Ready' state means the environment is active and available for use, confirming option D is correct.

Answer

The environment is a sandbox

Answer

The environment has been deleted

Answer

The environment is disabled

Question 6

Refer to the exhibit. A Power Platform administrator creates a DLP policy as shown. What is the effect of this policy?

Accepted Answer

Facebook, Twitter, and LinkedIn connectors are blocked tenant-wide. The exhibit shows a Data Loss Prevention (DLP) policy configured with the 'Social media' category set to 'Blocked' for all environments. This means the Facebook, Twitter, and LinkedIn connectors are explicitly blocked tenant-wide, preventing their use in any environment (production, sandbox, or default). Option C correctly identifies this outcome.

Answer

Facebook, Twitter, and LinkedIn connectors are allowed in all environments

Answer

All social media connectors are blocked in all environments

Answer

The policy only applies to production environments

Question 7

A company is implementing Microsoft Power Platform. The administrator needs to prevent users from creating personal productivity environments. What should they configure?

Accepted Answer

Disable the 'Create personal productivity environments' setting in the Power Platform admin center. The Power Platform admin center includes a tenant-wide setting specifically named 'Create personal productivity environments' that, when disabled, prevents users from creating their own personal environments. This setting directly controls the ability to create environments for personal productivity, which is distinct from other environment creation permissions.

Answer

Configure a Data Loss Prevention (DLP) policy

Answer

Set a conditional access policy in Microsoft Entra ID

Answer

Reduce the tenant-level environment capacity limits

Question 8

A company uses Power Platform with Microsoft Dataverse. The administrator notices that a user can create a new environment without approval. The company wants to enforce a process where all environment creation requires administrator approval. What should the administrator configure?

Accepted Answer

Disable the 'Create personal productivity environments' setting in the Power Platform admin center. The 'Create personal productivity environments' setting in the Power Platform admin center controls whether users can create their own environments without requiring administrator approval. Disabling this setting enforces a process where all environment creation must go through an administrator, aligning with the company's requirement for approval-based environment provisioning.

Answer

Configure a Data Loss Prevention (DLP) policy

Answer

Set a conditional access policy in Microsoft Entra ID

Answer

Reduce the tenant-level environment capacity limits

Question 9

A Power Platform administrator needs to review which users have accessed a specific environment in the last 30 days. What should they use?

Accepted Answer

Power Platform admin center auditing. The Power Platform admin center provides built-in auditing capabilities that allow administrators to view user access logs for specific environments. By navigating to the 'Auditing' section within the admin center, an admin can filter by environment and date range (e.g., last 30 days) to see which users have accessed the environment. This is the correct tool because it is purpose-built for Power Platform governance and does not require additional scripting or external tools.

Answer

Power Platform PowerShell cmdlets

Answer

Power Apps maker portal

Answer

Microsoft 365 admin center

Question 10

A Power Platform administrator needs to delegate environment administration to a team member without granting full tenant-level admin rights. Which TWO roles can the administrator assign?

Accepted Answer

Power Platform Service Admin. Options A (Power Platform Service Admin) and B (Environment Admin) are correct. The Power Platform Service Admin role provides global admin-like capabilities within the Power Platform, such as managing environments, without granting full tenant-level admin rights across all Microsoft 365 services. The Environment Admin role grants full administrative control over a specific environment, including managing permissions and settings, but is scoped to that environment only. Option C (Microsoft Entra ID Admin) is incorrect because it only manages identity and access in Microsoft Entra ID, not Power Platform environments. Option D (Dynamics 365 Admin) is incorrect because while it does include some Power Platform administration, it is broader and not specifically for delegating environment-level administration without additional privileges; also, it is not one of the two roles recommended for scoped delegation. Option E (Global Admin) is incorrect because it has unrestricted access to all tenant-level settings and services.

Answer

Microsoft Entra ID Admin

Answer

Dynamics 365 Admin

Answer

Global Admin

Question 11

An administrator is planning to deploy a solution across multiple environments. Which THREE practices should they follow?

Accepted Answer

Create separate environments for development, test, and production. Microsoft best practices recommend using separate environments for development, test, and production to isolate changes, prevent accidental data loss, and support a structured application lifecycle management (ALM) process. Each environment can have its own data, security settings, and solution versions, ensuring that modifications are validated before reaching production.

Answer

Use unmanaged solutions in production for easier modifications

Answer

Copy the entire development environment to test and production

Question 12

Refer to the exhibit. An administrator deploys this ARM/Bicep template to create a new Power Platform environment. What type of environment will be created?

Accepted Answer

Sandbox environment. The ARM/Bicep template sets the 'environmentSku' property to 'Sandbox', which directly specifies the environment type as a Sandbox environment. Sandbox environments are non-production instances used for development, testing, and training, isolated from production data and workloads.

Answer

Developer environment

Answer

Trial environment

Answer

Production environment

Question 13

A company is deploying Microsoft Power Platform across multiple departments. They want to ensure that only licensed users can create environments. What should they configure?

Accepted Answer

Configure the Dynamics 365 admin center to restrict environment creation to administrators only.. The Dynamics 365 admin center (now largely replaced by the Power Platform admin center) can be configured to restrict environment creation to administrators only. By enabling this setting, only licensed users with administrative roles can create new environments, meeting the requirement. Option A is incorrect because the Environment Maker role allows users to create resources within an environment (such as apps and flows), not to create the environments themselves. Options B and C are incorrect because environment creation permissions are managed within the Power Platform admin center, not through the Microsoft 365 admin center or Microsoft Entra ID roles.

Answer

In the Power Platform admin center, assign the Environment Maker security role to specific users.

Answer

Disable environment creation for all users in the Microsoft 365 admin center.

Answer

Use Microsoft Entra ID roles to control environment creation permissions.

Question 14

An organization wants to manage all Power Platform environments from a single pane of glass, including capacity monitoring and assignment of user roles. Which tool should they use?

Accepted Answer

Power Platform admin center. The Power Platform admin center (admin.powerplatform.microsoft.com) is the dedicated management portal for all Power Platform environments, providing a single pane of glass for tasks such as capacity monitoring (storage usage per environment), environment lifecycle management, and assignment of user roles via Data Loss Prevention (DLP) policies and environment security roles. It centralizes administration across Power Apps, Power Automate, Power Virtual Agents, and Dataverse, which aligns directly with the organization's requirement.

Answer

Microsoft 365 admin center

Answer

Microsoft Intune

Answer

Azure portal

Question 15

Which TWO actions can an administrator perform in the Power Platform admin center to manage environments?

Accepted Answer

Assign security roles to users within an environment.. The Power Platform admin center allows administrators to assign security roles to users within an environment, controlling their access to resources like apps, flows, and data. This is a core administrative task for managing environment-level permissions. Option C is correct because creating and deleting environments is a fundamental capability of the Power Platform admin center, enabling administrators to provision and remove isolated workspaces for development, testing, or production.

Answer

Configure SharePoint site permissions.

Answer

Manage Power BI Premium capacity.

Answer

Configure Microsoft Entra ID Conditional Access policies.